CVE-2011-3486 Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which triggers an out-of-bounds read.
MediumCVSS 5.0
EPSS 49.7%
Framework module
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which triggers an out-of-bounds read.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| beckhoff twincat | <= 2.11.0.2004 | No fix listed |
| beckhoff twincat | = 2.7 | No fix listed |
| beckhoff twincat | = 2.8 | No fix listed |
| beckhoff twincat | = 2.9 | No fix listed |
| beckhoff twincat | = 2.10 | No fix listed |
References
- aluigi.altervista.org exploit
- 75495 vdb-entry
- 8380 third-party-advisory
- www.us-cert.gov us-government-resource
- twincat-datagram-dos(69765) vdb-entry